topic With AVC you can block access in Wireless

WLC block applications

csocorro1 — Mon, 05 Jul 2021 11:44:26 GMT

Good morning,

Is it possible to block applications (also web access) like youtube and facebook with only a WLC? And in case it is, how is done?

Thank you

You need to configure an AVC

Philip D'Ath — Thu, 10 Mar 2016 00:02:50 GMT

You need to configure an AVC profile.

http://www.cisco.com/c/en/us/support/docs/wireless/5500-series-wireless-controllers/115756-avc-guide-00.html

With AVC you can block access

mohanak — Thu, 10 Mar 2016 02:19:19 GMT

With AVC you can block access to applications and websites.

Refer link : http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/7-5/AVC_dg7point5.html

Thank you for your response.

csocorro1 — Thu, 10 Mar 2016 14:23:07 GMT

Thank you for your response.

I configured the AVC profile and it worked well blocking the URL.

However, when I tested with the applications (youtube and linkedin) from different smartphones, the access wasnt blocked and the users could still get into those applications without any problems.

Is there another configuration needed? Or any other walkaround?

Thank you

Lets try solving this a

Philip D'Ath — Fri, 11 Mar 2016 01:53:59 GMT

Lets try solving this a different way. Do you operate you own internal DNS servers (such as AD servers) which are used by this network?

If so add a DNS domain called "youtube.com". You don't even have to add any records. That will stop access.

Ditto for any other domains.

We don't have AD servers.

csocorro1 — Fri, 11 Mar 2016 16:23:06 GMT

We don't have AD servers.

The access we want to deny is from an app in a smartphone to the Internet. The specific apps to be denied are for example youtube, facebook, twitter, etc.

We were able to block the web access, but not the apps access. Thats our biggest issue.

Do you know anything else that can be done?

Thx

I had a similar problem

George Stefanick — Sat, 12 Mar 2016 14:21:57 GMT

I had a similar problem blocked web but not app. We ended up blocking the wifi subnet for this traffic at the fw. Not ideal but it solved a problem.